Hello i have sccm r2 infrastructure with one primary site and two secondary site, recnetly we sign up the contract with third party vendor where they will get the desktop/laptop and they will put our corporate image with our apps and software and then they will ship the laptop to us..so i was thinking to build a seocondary site server with pxe role and ship that box to the vendor and communicate that server back to corppate via vpn tunnel..is that something would work...what i want to accomplish is to whenver i update my pxe image and task sequence with distribution points my server at the vendor will also get updated any thoughts D

Yes, you can handle the secondary site at vendor the same way as secondary sites in your premises. I had the same need to have a PXE and DP at vendor site. I didn't use separate secondary site for that rather than just another site system in existing secondary site, but of course it can be secondary site as well. This solution is working fine for me. You just need to make sure that any boot images, OS images, software packages needed for building the machines, must be distributed to vendor DP as well.

what about the boundaries, i do not want any of my corporate clients to connect to this off site site server for pakcages..so i have not configured any boundries for this site server. currently i am using active directgory sites for boundaries. .how did you do that in your environment? d

To make sure only the clients in vendor site connect to this DP, you have to make the DP protected. You must configure boundaries correctly and associate them with site system. This article explains protected distribution point: http://technet.microsoft.com/en-us/library/bb932133.aspx In my case we used IP range boundary for vendor site, but you could create separate AD site for vendor and add an AD site boundary as well.

thanks for reply but i am finally ready to configure. so bascially if i bring up the vendor site server in the same primary site server and protect that vendor server with ip range, it should work correct .also can you mix the AD sites and IP range in boundary's sicne i have all of my sites as AD sites and i dont wont to bring up the DC at vendor so i was thnking to use ip range? thanks